$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: eJ59krtiqnn9nznkGlcg/zKXUpoEtPTPA9s344PVJWE= Subject key identifier: 1B:1A:F3:FB:5C:F8:88:80:81:0A:A2:B1:48:0C:86:32:EC:92:45:A3 Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 1E5DFAEFB7B4CD60492A239C273B0E7E259A4B33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01EA Signing time: Mon 03 Nov 2025 21:10:40 +0000 Manifest this update: Mon 03 Nov 2025 21:05:40 +0000 Manifest next update: Fri 07 Nov 2025 00:47:40 +0000 Files and hashes: 1: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: sksB0+JpfamOk8agUpLTqgwXQckz8CSkrdrAWOtJ4OI=) 2: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: vT3Xn8B8hG56dzqbvWK2pMUqwZCmWdOOYUdcKA2cphg=) 3: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: wyY3CPGpB3zzZUc8QiVL+ydL4s6XrQRhF73erj2QQSs=) 4: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: xdEDtfm0tP7FMpWiWg9KdIp8IvvJjKZMSw6HMfYr844=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5d:fa:ef:b7:b4:cd:60:49:2a:23:9c:27:3b:0e:7e:25:9a:4b:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Nov 3 21:05:40 2025 GMT Not After : Nov 7 00:47:40 2025 GMT Subject: CN=1B1AF3FB5CF88880810AA2B1480C8632EC9245A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f2:e6:a4:b8:32:58:ba:70:e0:e0:d5:88:8d: 8c:d4:9b:8e:7e:79:ca:fe:68:c8:27:49:b8:70:7d: e7:5e:68:6a:a0:68:09:1b:28:37:9c:fc:5f:bc:9c: 6d:48:f4:64:b8:fc:ed:45:2e:a8:66:e1:29:f6:ee: ad:4e:3b:91:d3:c3:3c:3f:c1:bf:fa:c4:f7:f3:97: 6d:f0:73:05:53:cd:b8:3c:c7:0e:16:f0:f7:69:87: 15:e4:c7:53:58:3a:df:68:d7:94:a9:7e:b1:44:01: 17:e0:b2:e1:21:f1:d2:7b:ee:45:ce:4e:ed:22:fe: 7a:6e:5d:69:59:c3:96:3a:80:95:63:f8:34:32:b4: d9:22:33:9f:90:76:d3:49:91:f5:15:9e:2c:df:19: 5e:d0:38:ac:9c:39:07:36:32:c0:d2:df:0c:cd:6f: ed:c5:84:77:07:c9:ad:58:d3:d8:e1:88:28:98:d9: 61:fc:71:67:3d:8e:0d:94:87:9a:3c:56:d4:6d:0c: 65:12:76:43:e2:6a:e3:b2:b4:b7:ad:34:99:cd:15: 71:8c:f6:e1:ad:8b:76:0c:89:bc:ee:c8:f1:98:90: 0f:e0:08:ae:e2:db:c1:a1:cf:de:9e:e5:80:dd:ff: d2:f5:8a:22:d0:3a:42:93:c6:d6:b7:44:3b:15:fe: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1A:F3:FB:5C:F8:88:80:81:0A:A2:B1:48:0C:86:32:EC:92:45:A3 X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:56:f9:4b:eb:f8:d7:9f:30:ef:70:ee:5a:80:57:6c:a2:3a: 8e:82:f2:4a:ff:94:ad:80:b6:6e:d7:4c:f6:97:34:cc:58:3c: 0a:2c:86:ec:b8:6a:39:82:d2:6b:d2:28:6c:57:88:15:f8:a6: e4:71:53:ca:96:b5:b8:63:94:5c:0b:7f:a0:ea:70:e2:52:fd: fa:7e:65:b4:9f:c1:ad:6d:96:d2:0d:af:92:4c:9f:61:8b:50: c9:e5:f3:ad:ef:35:46:b2:3c:4a:00:f0:56:1c:04:12:bf:91: 8b:a0:ff:33:26:59:40:50:91:2a:93:79:c1:2e:dd:61:1b:72: eb:f5:84:bd:d4:db:d8:ce:6c:6f:20:60:6b:db:a6:5e:3b:df: 86:13:b4:ca:de:df:c5:fd:5b:09:48:66:b8:2f:ee:f4:19:27: e2:1c:ea:e0:a5:d7:ac:76:9e:60:7f:29:ff:af:f0:f9:52:c1: db:9d:76:95:db:5f:86:aa:83:ff:a6:a0:17:48:b3:6c:de:b0: b3:22:18:4a:73:7a:eb:cd:a9:10:11:b8:36:cb:f9:6a:b3:14: 91:81:69:e1:45:d0:b3:8d:d6:c1:93:16:ea:14:98:08:8f:be: 9c:a6:61:28:90:8b:73:0b:bc:d7:ef:ec:d3:ce:f4:fa:1d:1d: 75:90:80:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHl3677e0zWBJKiOcJzsOfiWaSzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTExMDMyMTA1NDBaFw0yNTExMDcwMDQ3NDBaMDMxMTAvBgNV BAMTKDFCMUFGM0ZCNUNGODg4ODA4MTBBQTJCMTQ4MEM4NjMyRUM5MjQ1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8uakuDJYunDg4NWIjYzUm45+ ecr+aMgnSbhwfedeaGqgaAkbKDec/F+8nG1I9GS4/O1FLqhm4Sn27q1OO5HTwzw/ wb/6xPfzl23wcwVTzbg8xw4W8PdphxXkx1NYOt9o15SpfrFEARfgsuEh8dJ77kXO Tu0i/npuXWlZw5Y6gJVj+DQytNkiM5+QdtNJkfUVnizfGV7QOKycOQc2MsDS3wzN b+3FhHcHya1Y09jhiCiY2WH8cWc9jg2Uh5o8VtRtDGUSdkPiauOytLetNJnNFXGM 9uGti3YMibzuyPGYkA/gCK7i28Ghz96e5YDd/9L1iiLQOkKTxta3RDsV/mitAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGxrz+1z4iICBCqKxSAyGMuySRaMwHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANW+Uvr+NefMO9w7lqAV2yiOo6C8kr/lK2A tm7XTPaXNMxYPAoshuy4ajmC0mvSKGxXiBX4puRxU8qWtbhjlFwLf6DqcOJS/fp+ ZbSfwa1tltINr5JMn2GLUMnl863vNUayPEoA8FYcBBK/kYug/zMmWUBQkSqTecEu 3WEbcuv1hL3U29jObG8gYGvbpl4734YTtMre38X9WwlIZrgv7vQZJ+Ic6uCl16x2 nmB/Kf+v8PlSwduddpXbX4aqg/+moBdIs2zesLMiGEpzeuvNqRARuDbL+WqzFJGB aeFF0LON1sGTFuoUmAiPvpymYSiQi3MLvNfv7NPO9PodHXWQgAw= -----END CERTIFICATE-----Generated at Wed Nov 5 08:18:35 2025 by rpki-client